hardMultiple ChoiceObjective-mapped
300-410 Practice Question: An engineer configures Flexible NetFlow on a…
An engineer configures Flexible NetFlow on a router to monitor traffic. Unexpectedly, the NetFlow exporter does not send any flow records to the collector. The engineer verifies that the monitor is applied to the correct interface and that the collector is reachable. Which is the most likely explanation?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The flow monitor references a record that does not include mandatory match fields, causing the monitor to remain inactive.
Flexible NetFlow requires a flow monitor to reference a record that defines the match and collect fields. If the record is not defined or is incomplete (e.g., missing key fields like source/destination IP), the monitor may not generate any flows. Additionally, the exporter configuration must include the correct source interface and transport protocol (UDP) to the collector. A common edge case is when the record is defined but uses 'match ipv4 protocol' without 'match ipv4 source address', causing the flow monitor to fail to create flows.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The flow monitor references a record that does not include mandatory match fields, causing the monitor to remain inactive.
Why this is correct
Flexible NetFlow records require at least one match field (e.g., source IP, destination IP, protocol). Without it, the monitor cannot classify flows and will not export any data.
- ✗
The exporter is configured with 'transport tcp' instead of 'transport udp', and the collector only accepts UDP.
Why it's wrong here
While NetFlow traditionally uses UDP, Flexible NetFlow can use TCP or UDP. However, this is a configuration mismatch rather than a missing record issue.
- ✗
The interface where the monitor is applied is in a VRF, and the exporter is not configured with the VRF name.
Why it's wrong here
This is a valid issue in VRF environments, but the scenario does not mention VRF, and the collector reachability is verified, so this is less likely.
- ✗
The flow monitor uses 'cache timeout inactive 60' which is too long, causing flows to be held until the cache is full.
Why it's wrong here
This would delay export but not prevent it entirely; flows would still be sent eventually.
Go deeper
Related to this question
About these practice questions
One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.